fix(auth, web-app): update Keycloak config secrets and improve SW cache handling

- Updated `keycloak/meldestelle-realm.json` to replace dynamic secrets with static values for local testing.
- Incremented service worker cache version to `v4` and added bypass rules for API requests and app bundles to prevent outdated data.

Signed-off-by: Stefan Mogeritsch <stefan.mo.co@gmail.com>

frontend/shells/meldestelle-portal/src/jsMain/resources/sw.js

@@ -1,6 +1,6 @@
 const IS_DEV = self.location.hostname === 'localhost' || self.location.hostname === '127.0.0.1' || self.location.hostname === '::1';
 
-const CACHE_NAME = 'meldestelle-cache-v3';
+const CACHE_NAME = 'meldestelle-cache-v4';
 const PRECACHE_URLS = [
   '/',
   '/index.html',
@@ -75,6 +75,12 @@ self.addEventListener('fetch', (event) => {
     return;
   }
 
+  // API-Requests immer direkt vom Netzwerk – niemals aus dem Cache (Auth-Header müssen erhalten bleiben)
+  if (url.pathname.startsWith('/api/')) {
+    event.respondWith(fetch(req));
+    return;
+  }
+
   // App-Bundle immer vom Netzwerk – niemals aus dem Cache (verhindert veraltete JS-Versionen)
   if (url.pathname.endsWith('web-app.js') || url.pathname.endsWith('web-app.js.map')) {
     event.respondWith(fetch(req));